Information Security Officer (ISO)

ppbSecurity IT /b /p h3Information Security Officer (ISO) /h3 pbThis is what you tell people at parties /b /p p“At Sendcloud, we build Europe’s leading shipping automation platform - helping over 25,000 e-commerce businesses grow. I help make sure we can scale fast and safely: keeping our ISO 27001 security program strong, turning security risks into clear decisions, and working with Engineering, Platform, IT, Legal/Privacy and Support to protect our customers, our people, and our business. Security here is a business enabler - not a checkbox.” /p pbWhat you will do in this role 🧐 /b /p pWe’re looking for an bInformation Security Officer /b who can combine bpragmatic governance /b with bhands‑on program leadership /b. You’ll own our information security program and help ensure our ISO 27001 ISMS stays healthy and audit‑ready while driving real security improvements across the company. /p pThis is a role for someone who enjoys building clarity, influencing stakeholders, and making sure important work actually gets done. /p pYou’ll be involved in: /p ul libOwning our ISO 27001 ISMS (and keeping it always‑on) → /b internal audits, evidence, management reviews, corrective actions, and external audit readiness /li libRunning security risk management that leads to decisions → /b maintaining a living risk register, driving mitigations with owners and timelines, and enabling explicit risk acceptance when needed /li libDriving security governance that teams can actually use → /b practical policies and standards for access, data handling, vendor risk, and incident response /li libLeading security incident governance → /b classification, escalation, post‑incident learning loops, and preventing repeats (in partnership with Platform/Engineering/Support) /li libManaging third‑party and vendor security risk → /b risk tiering, due diligence, and working with Legal on security requirements and ongoing assurance /li libEnabling safe use of AI and agentic workflows → /b clear guardrails for AI tooling and automation so we can adopt AI safely without slowing teams down (including visibility on shadow IT/AI in collaboration with IT/Platform) /li libBeing at the table for architecture decisions with security impact → /b you’ll participate in relevant architecture forums as a required security reviewer (not the decision maker), especially around identity/auth migrations, service‑to‑service patterns, and high blast‑radius platform changes - to help teams catch security implications early and keep delivery moving /li libReporting and stakeholder alignment → /b clear updates to leadership on security posture, top risks, incidents, audit outcomes, and progress /li /ul pbOur perfect match /b /p ul lib3+ (typically 5+) years of relevant experience /b, with bproven ownership /b of an bISMS/audit cycle /b (ISO 27001 or equivalent) and the ability to drive bcross‑functional remediation /b independently (ideally in SaaS/tech or a fast‑paced scale‑up). bThis is not an entry‑level role /b - you’ll be expected to lead audits, run risk governance, and influence Engineering leadership (EM to VP) /li liProven experience boperating or significantly contributing to an ISO 27001 ISMS /b and driving audit readiness and remediation /li liStrong stakeholder management - you can binfluence, challenge, and drive follow‑through /b across Engineering, Product, Platform, IT, and senior leadership /li liPragmatic mindset: you balance security, speed, and customer impact using brisk‑based thinking /b /li liStrong written and verbal communication in English - you can turn complex topics into clear actions and decisions /li liA hands‑on, ownership mentality: you don’t just write policies - you help make them real /li /ul pbNice‑to‑have ✨ /b /p ul liExperience preparing for bSOC 2 /b readiness or similar assurance frameworks /li liFamiliarity with bAI governance / AI risk management /b concepts and modern GenAI risks (or strong curiosity to learn fast) /li liCertifications like bCISSP, CISM, CISA, Security+, ISO 27001 Lead Implementer/Auditor /b (helpful, not required) /li liExperience with vendor security reviews, security questionnaires, and enterprise customer trust requirements /li /ul pbYou share our core values /b /p p bNo bullshit /b: We value honesty, transparency, and openness. Mistakes are for learning.br/ bGrow Win /b: Keep learning and improving - from each other, from challenges, and from feedback.br/ bHave fun /b: Be yourself! We work hard together and enjoy the ride as a team. /p pbWhat we offer /b /p ul liA high‑impact role with real ownership and visibility across the company /li liThe opportunity to shape how Sendcloud scales trust and security in 2026+ /li liWork closely with Engineering, Platform, IT, Legal/Privacy, Support and leadership - no siloed “security department” /li liSupport for professional development and relevant certifications /li liFlexible hybrid work model + b€500 home office budget /b /li lib28 holidays /b per year (based on full‑time) + a free day off around your birthday /li lib4‑week paid sabbatical /b after 3 years at Sendcloud ️ /li lib€2,000 annual study budget /b /li liAccess to the Sendcloud gym weekly Bootcamp and Boxing sessions /li liPension scheme /li liHealth insurance discount /li /ul pbAll CVs must be submitted in English. /b /p /p #J-18808-Ljbffr